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Claims 

[d] l. A method of disabling malicious code residing on a 
customer computer system in association with providing 
on-line financial services to a customer through a net- 
work, the method comprising: 
authenticating the customer for the on-line financial 
services; 

presenting to the customer an option to perform a scan 
of the customer computer system for the malicious code; 
executing, at least in part by activation over the network 
and upon receiving from the customer a selection of the 
option to perform the scan, computer program instruc- 
tions for performing the scan, the computer program in- 
structions being directed to detection and disablement 
of the malicious code; and 

providing the on-line financial services to the customer. 

[c2] 2. The method of claim 1 wherein the executing of the 
computer program instructions further comprises down- 
loading the computer program instructions to the cus- 
tomer computer system. 

[c3] 3. The method of claim 2 wherein the executing of the 
computer program instructions is accomplished at least 



in part through the use of an ActiveX control. 

[c4] 4. The method of claim 2 wherein the computer program 
instructions are operable to perform signature-based 
detection of the malicious code. 

[c5] 5. The method of claim 2 wherein the computer program 
instructions are operable to perform integrity checking. 

[c6] 6. The method of claim 2 wherein the computer program 
instructions are operable to perform non-in- 
tegrity-based unknown malicious code detection. 

[c7] 7. The method of claim 3 wherein the computer program 
instructions are operable to perform signature-based 
detection of the malicious code. 

[c8] 8. The method of claim 3 wherein the computer program 
instructions are operable to perform integrity checking. 

[c9] g. The method of claim 3 wherein the computer program 
instructions are operable to perform non-in- 
tegrity-based unknown malicious code detection. 

[do] io. Apparatus for disabling malicious code residing on a 
customer computer system in association with providing 
on-line financial services to a customer through a net- 
work, the apparatus comprising: 

means for authenticating the customer for the on-line fi- 



nancial services; 

means for executing, at least in part by activation over 
the network, computer program instructions for per- 
forming a scan for the malicious code, the computer 
program instructions being directed to detection and 
disablement of the malicious code; and 
means for providing the on-line financial services to the 
customer. 

[cH] 11. The apparatus of claim 10 wherein the means for ex- 
ecuting the computer program instructions further com- 
prises means for downloading the computer program in- 
structions to the customer computer system. 

[c12] 12. The apparatus of claim 11 wherein the means for ex- 
ecuting the computer program instructions further com- 
prises an ActiveX control. 

[d3] 13. a computer program product for disabling malicious 
code residing on a customer computer system in associ- 
ation with providing on-line financial services to a cus- 
tomer through a network, the computer program prod- 
uct comprising a first computer program and a second 
computer program, the first computer program further 
comprising: 

instructions for authenticating the customer for the on- 
line financial services; 



instructions for presenting to the customer an option to 
perform a scan of the customer computer system for the 
malicious code; 

instructions for executing, at least in part through acti- 
vation over the network and upon receiving from the 
customer a selection of the option to perform the scan, 
the second computer program for performing the scan, 
the second computer program being directed to detec- 
tion and disablement of the malicious code; and 
instructions for providing the on-line financial services 
to the customer. 

[c14] 14. The computer program product of claim 13 wherein 
the instructions for executing the second computer pro- 
gram further comprise instructions for downloading the 
second computer program to the customer computer 
system. 

[d5] 15. The computer program product of claim 14 wherein 
the instructions for executing the second computer pro- 
gram further comprise an ActiveX control. 

[d6] 16. The computer program product of claim 14 wherein 
the second computer program is operable to perform 
signature-based detection of the malicious code. 

[d7] 17. The computer program product of claim 14 wherein 



the second computer program is operable to perform in- 
tegrity checking. 

[d8] 18. The computer program product of claim 14 wherein 
the second computer program is operable to perform 
non-integrity-based unknown malicious code detection. 

[d9] 19. The computer program product of claim 15 wherein 
the second computer program is operable to perform 
signature-based detection of the malicious code. 

[c20] 20. The computer program product of claim 15 wherein 
the second computer program is operable to perform in- 
tegrity checking. 

[c21] 21. The computer program product of claim 15 wherein 
the second computer program is operable to perform 
non-integrity-based unknown malicious code detection. 

[c22] 22. An on-line financial system comprising: 
at least one network connection; 
an on-line financial transaction server operable to pro- 
vide on-line financial services to customers; and 
a scanning server operatively connected to the at least 
one network connection and to the on-line financial 
transaction server, the scanning server operable to dis- 
able malicious code residing on a customer computer 
system in association with the providing of the on-line 



financial services, by executing, at the customer com- 
puter system, at least in part by activation over the net- 
work connection, computer program instructions di- 
rected to detection and disablement of the malicious 
code. 

[c23] 23. The system of claim 22 wherein the scanning server 
further comprises the computer program instructions, 
and wherein the scanning server is further operable to 
download to computer program instructions to the cus- 
tomer computer system. 

[c24] 24. The system of claim 23 wherein the scanning server 
further comprises an ActiveX wrapper and wherein the 
scanning server is further operable to execute the com- 
puter program instructions at the customer computer 
system using an ActiveX control. 

[c25] 25. The system of claim 23 wherein the computer pro- 
gram instructions are operable to perform signature- 
based detection of the malicious code. 

[c26] 26. The system of claim 23 wherein the computer pro- 
gram instructions are operable to perform integrity 
checking. 



[C27] 



27. The system of claim 23 wherein the computer pro- 
gram instructions are operable to perform non-in- 



teg rity- based unknown malicious code detection. 



[c28] 28. The system of claim 24 wherein the computer pro- 
gram instructions are operable to perform signature- 
based detection of the malicious code. 

[c29] 29. The system of claim 24 wherein the computer pro- 
gram instructions are operable to perform integrity 
checking. 

[c30] 30. The system of claim 24 wherein the computer pro- 
gram instructions are operable to perform non-in- 
tegrity-based unknown malicious code detection. 



